UpHeron
All vulnerabilities

Servers and applications

CVE-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to…

Severity
High 7.5
Published
12 May 2017
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Version 9.6.2
  • Version 9.6.1
  • Version 9.6
  • Version 9.5.6
All 40 release lines
  • Every version up to 9.2.20
  • Version 9.3
  • Version 9.3.1
  • Version 9.3.2
  • Version 9.3.3
  • Version 9.3.4
  • Version 9.3.5
  • Version 9.3.6
  • Version 9.3.7
  • Version 9.3.8
  • Version 9.3.9
  • Version 9.3.10
  • Version 9.3.11
  • Version 9.3.12
  • Version 9.3.13
  • Version 9.3.14
  • Version 9.3.15
  • Version 9.3.16
  • Version 9.4
  • Version 9.4.1
  • Version 9.4.2
  • Version 9.4.3
  • Version 9.4.4
  • Version 9.4.5
  • Version 9.4.6
  • Version 9.4.7
  • Version 9.4.8
  • Version 9.4.9
  • Version 9.4.10
  • Version 9.4.11
  • Version 9.5
  • Version 9.5.1
  • Version 9.5.2
  • Version 9.5.3
  • Version 9.5.4
  • Version 9.5.5
  • Version 9.5.6
  • Version 9.6
  • Version 9.6.1
  • Version 9.6.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-7484
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-7484